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AMENDMENTS 
In the Specification 

Please replace paragraph 082 beginning on page 21 with the following: 

FIG. 8B is a flow diagram illustrating an example of the operation of the host-side sub- 
net shown in FIG. 8A. The process begins with host 800 initiating the authentication process 
(step 850). Next, a challenge is issued from authentication server 830, to challenge the user for 
their user name and password (again, in the manner described in connection with FIG. 2) (step 
855). In response to this challenge, the user supplies their username and password (step 860). A 
determination is then made as to whether authentication server 830 can authenticate the user 
(step 865). If the user can not cannot b e authenticated, a determination is made as to whether 
not to allow the user to re-enter their username and password (step 870). If the re-entry of this 
information is acceptable, process loops to authentication server 830 challenging the user (step 
855). Otherwise (e.g., if either this re-entry has been allowed a maximum a number of times or is 
not allowed at all), the process ends. 

Please replace paragraph 091 beginning on page 24 with the following: 

The software modules described herein may be received by such a computer system, for 
example, from computer readable media. The computer readable media may be permanently, 
removably or remotely coupled to the computer system. The computer readable media may non- 
exclusively include, for example, any number of the following: magnetic storage media 
including disk and tape storage mediaHJl^optical storage media such as compact disk media 
(e.g., CD-ROM, CD-R, etc.) and digital video disk storage media[ [.^nonvolatile memory 
storage memory including semiconductor-based memory units such as FLASH memory, 
EEPROM, EPROM, ROM or application specific integrated circuits[[.]]^volatile storage media 
including registers, buffers or caches, main memory, RAM, and the like[[.]] a and data 
transmission media including computer network, point-to-point telecommunication, and carrier 
wave transmission media. In a UNIX-based embodiment, the software modules may be 
embodied in a file which may be a device, a terminal, a local or remote file, a socket, a network 
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connection, a signal, or other expedient of communication or state change. Other new and 
various types of computer-readable media may be used to store and/or transmit the software 
modules discussed herein. 

Please replace paragraph 099 beginning on page 27 with the following: 

If packet 1085 is the first packet to be sent from host 1005 to server 1010, an ARP 
process will be triggered for the destination. The sending of packet 1085 begins with the SUG (in 
this case, with a value of 5) being taken from SGT 1080. A FIB lookup in router 1055 for a 
packet fe«ve having the destination of packet 1085 indicates the next hop router to which the 
packet should be forwarded. This Next Hop Information could be, for example, either the MAC 
rewrite information for router 1060, or that for a router between router 1055 and router 1060. 
This can be seen in Table 4, which illustrates a FIB with such contents. 
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